$ rpki-client -vvf rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft File: 2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft (raw, json) Hash identifier: xPN4KJX5jK4XC8lvk5GiHrqWBJkoiUCn87jIO4soCsg= Subject key identifier: 87:2A:0D:01:1A:24:E3:9A:9E:D4:9E:BD:94:0F:D7:EA:71:A8:42:4D Authority key identifier: D9:87:2C:19:3E:18:DC:15:1F:E3:EF:9E:29:AF:E8:31:21:B2:4D:10 Certificate issuer: /CN=A91A822F/serialNumber=D9872C193E18DC151FE3EF9E29AFE83121B24D10 Certificate serial: 01CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2YcsGT4Y3BUf4--eKa_oMSGyTRA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft Manifest number: 01B8 Signing time: Mon 27 Jul 2026 05:47:39 +0000 Manifest this update: Mon 27 Jul 2026 05:47:38 +0000 Manifest next update: Mon 03 Aug 2026 05:47:38 +0000 Files and hashes: 1: 2YcsGT4Y3BUf4--eKa_oMSGyTRA.crl (hash: IaSD6vLUNI/WOy38EiWstFMCxJHkI/Aof9XIGHBLfU8=) 2: 1B7430784BD411F1A6EB1F4394833773.roa (hash: oe2ZCXIQb92ROAH/nNeoR+2JzTpi9XU0AorFDG3Oc4Y=) 3: DAF8A746E01B11F097920A16646F56BC.roa (hash: ddW0Ynay18N2vbuqKbzQBFWoQChkJES43ys+thhHWto=) 4: BAFD2318E01B11F088B1D0FE636F56BC.roa (hash: nQQCvcP4Ab62KnLuqB+2dhOJymAwNDUrlbhEiMGFBCY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.crl rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2YcsGT4Y3BUf4--eKa_oMSGyTRA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 05:47:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 458 (0x1ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A822F, serialNumber=D9872C193E18DC151FE3EF9E29AFE83121B24D10 Validity Not Before: Jul 27 05:47:38 2026 GMT Not After : Aug 3 05:47:38 2026 GMT Subject: CN=6a66f0fb-d163 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:2a:6f:1e:ae:55:1a:59:5c:3d:08:0d:60:cb: a8:5c:d4:37:ff:c4:4c:dc:74:46:a8:d2:c5:20:96: 79:52:5d:81:88:2b:0f:4f:8c:d2:d1:be:fb:e6:23: d8:27:eb:96:ad:81:dd:cb:db:54:22:fa:ee:bc:10: b5:27:10:4d:17:b6:c9:57:92:67:8f:8d:55:4a:d7: 3a:7b:c8:83:50:d5:70:27:7e:c3:42:0a:7a:75:cc: 05:55:38:d1:60:bb:e6:a6:b3:ff:5b:ec:55:be:35: 24:96:e5:f1:35:6b:09:75:1e:a3:19:ab:49:99:9d: 7f:e9:79:ab:1b:56:e2:8b:dc:d8:70:cb:a3:0f:42: 98:c9:ff:a9:29:6d:e1:dd:6b:03:6a:8e:9e:fe:29: c6:91:49:7b:a7:2c:6c:d9:4c:ab:18:82:48:37:fd: ac:d4:ac:0c:3c:0c:c6:28:fa:8c:1e:67:53:e8:54: 45:4e:52:0b:5c:09:c0:63:e5:9c:b5:8f:98:a6:d0: f0:9e:00:b6:9c:27:55:40:ae:72:a8:5d:ae:17:46: 2e:1d:cf:35:44:46:d5:41:e6:a5:b3:bf:db:02:f8: 40:48:57:36:96:85:6f:ba:a0:32:c9:0e:3a:a7:0b: 12:4e:14:48:c0:62:9e:f8:bf:29:50:dc:6d:4b:09: c5:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:2A:0D:01:1A:24:E3:9A:9E:D4:9E:BD:94:0F:D7:EA:71:A8:42:4D X509v3 Authority Key Identifier: keyid:D9:87:2C:19:3E:18:DC:15:1F:E3:EF:9E:29:AF:E8:31:21:B2:4D:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2YcsGT4Y3BUf4--eKa_oMSGyTRA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:b0:8b:a6:fe:54:13:59:c4:1f:01:f4:31:b4:68:14:63:a1: 0d:37:1d:45:75:3e:ce:ee:dc:77:ce:32:96:b8:a2:cc:d9:cc: f4:72:20:e6:8a:a2:6e:f5:f2:e9:c5:b2:c1:5f:19:38:fa:28: eb:51:13:bd:2d:52:19:99:3c:22:a5:d4:c1:e1:75:ed:b6:19: 7a:77:69:5b:8a:a1:3d:cd:a9:fe:ad:5b:bc:28:d5:89:35:71: f1:15:43:a9:0c:a2:16:26:f0:2d:96:e2:00:68:d3:78:02:0c: ed:a7:38:28:6d:ef:76:c6:d7:3c:13:5f:71:4f:24:9f:62:e4: 5c:20:45:dd:40:30:ac:1f:7a:c0:cb:6f:54:95:43:eb:ed:35: 51:51:28:5e:52:39:ea:6c:0e:84:3c:2f:c4:51:10:b2:c9:5b: f0:08:34:d1:5c:8e:5b:71:41:07:d7:e1:35:af:6d:3e:b9:c2: 5c:1b:68:27:ec:46:3b:09:4c:7e:b1:21:0d:d7:f6:c8:95:da: 27:51:d0:af:29:df:cd:13:c9:d3:c4:05:3a:27:6a:82:cc:20: 7e:f5:2e:c2:12:e4:88:3f:5c:2a:63:7a:2c:60:3d:b1:c9:ed: fc:37:75:bd:12:3e:bf:7e:8d:dd:74:1f:a3:49:8c:0c:ec:7d: 44:d7:2c:60 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgyMkYxMTAvBgNVBAUTKEQ5ODcyQzE5M0UxOERDMTUxRkUzRUY5RTI5QUZFODMx MjFCMjREMTAwHhcNMjYwNzI3MDU0NzM4WhcNMjYwODAzMDU0NzM4WjAYMRYwFAYD VQQDEw02YTY2ZjBmYi1kMTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmCpvHq5VGllcPQgNYMuoXNQ3/8RM3HRGqNLFIJZ5Ul2BiCsPT4zS0b775iPY J+uWrYHdy9tUIvruvBC1JxBNF7bJV5Jnj41VStc6e8iDUNVwJ37DQgp6dcwFVTjR YLvmprP/W+xVvjUkluXxNWsJdR6jGatJmZ1/6XmrG1bii9zYcMujD0KYyf+pKW3h 3WsDao6e/inGkUl7pyxs2UyrGIJIN/2s1KwMPAzGKPqMHmdT6FRFTlILXAnAY+Wc tY+YptDwngC2nCdVQK5yqF2uF0YuHc81REbVQeals7/bAvhASFc2loVvuqAyyQ46 pwsSThRIwGKe+L8pUNxtSwnFzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIcqDQEa JOOantSevZQP1+pxqEJNMB8GA1UdIwQYMBaAFNmHLBk+GNwVH+Pvnimv6DEhsk0Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODIyRi81ODQyRDMwNEY3 RjAxMUVFOThDOEM5MkJDNEY5QUUwMi8yWWNzR1Q0WTNCVWY0LS1lS2Ffb01TR3lU UkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJZY3NHVDRZM0JVZjQtLWVLYV9vTVNHeVRSQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODIyRi81ODQyRDMwNEY3RjAxMUVFOThDOEM5MkJDNEY5QUUwMi8yWWNzR1Q0WTNC VWY0LS1lS2Ffb01TR3lUUkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMrCLpv5UE1nEHwH0MbRoFGOhDTcdRXU+zu7cd84ylriizNnM9HIg5oqibvXy 6cWywV8ZOPoo61ETvS1SGZk8IqXUweF17bYZendpW4qhPc2p/q1bvCjViTVx8RVD qQyiFibwLZbiAGjTeAIM7ac4KG3vdsbXPBNfcU8kn2LkXCBF3UAwrB96wMtvVJVD 6+01UVEoXlI56mwOhDwvxFEQsslb8Ag00VyOW3FBB9fhNa9tPrnCXBtoJ+xGOwlM frEhDdf2yJXaJ1HQrynfzRPJ08QFOidqgswgfvUuwhLkiD9cKmN6LGA9scnt/Dd1 vRI+v36N3XQfo0mMDOx9RNcsYA== -----END CERTIFICATE-----Generated at Tue Jul 28 22:49:09 2026 by rpki-client